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DETAILED ACTION 

1 . This written action is responding to the amendment dated on 07/05/2007. 

2. Claims 1, 7, 13, 19, and 24-29 have been amended. Claims 2, 6, 8-9, 12, 
and 15-16 have been canceled. 

3. Claims 1, 3-5, 7, 10-11, 13-14, and 17-29 have been submitted for 
examination. 

4. Claims 1, 3-5, 7, 10-11, 13-14, and 17-29 have been examined and 
rejected. 

5. Rejections of Independent claims are provided with detailed citations from 
the prior arts. 

Claim Objection 

6. Claim 13 is objected for failing to provide an antecedent basis for the 
claimed the recited limitation "transferring the protected key". Appropriate 
correction is required. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as 
set forth in section 102 of this title, if the differences between the subject matter sought to be 
patented and the prior art are such that the subject matter as a whole would have been obvious at 
the time the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains. Patentability shall not be negatived by the manner in which the invention was 
made. 
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7. Claims 1, 3, 5, 7, 10, 17-19, and 24-29 are rejected under 35 U.S.C. 
103(a) as being unpatentable over Engberg et al. (U.S. Patent 6,993,658) 
and further in view of Traversat et al. (U. S. Pub. 2002/0152299) and 
Bryson (U.S. Pub. 2004/0185777). 
a. Referring to Claims 1. 25. and 27: 

As per Claim 1 , Engberg et al. disclose a method of enabling at 
least one pervasive device to retrieve at least one authentication 
token from at least one personal authentication gateway, the at 
least one pervasive device comprising at least one automatic 
token client application and the at least one personal 
authentication gateway comprising at least one token server 
application, said method comprising the steps of: ascertaining at 
least one personal authentication gateway from the at least one 
pervasive device [(lines 13-17, Col. 4 and lines 27-32, Col. 6)]; 
sending at least one token request from at least one pervasive 
device to at least one personal authentication gateway [(lines 22- 
25 and 58-60, Col. 5; Fig. 1)]; and 

receiving a token response at the pervasive device from the at 
least one personal authentication gateway [(lines 28-31 and 60- 
65, Col. 5; Fig. 1)] 

Enberg et al. do not expressly disclose the remaining limitations 
of the claim. However, Traversat et al. disclose the limitations: 
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by broadcasting a pervasive authentication domain discovery 
request message and receiving at least one discovery response 
message from the at least one personal authentication gateway 
[(lines 1-3 of [0277]; lines 1-10 of [0323]; lines 9-18 of [0331] 
from Traversat et al.)]; 

only if the at least one pervasive device is authorized, the at least 
one pervasive device being authorized by the steps comprising: 
registering the at lest one pervasive device as a member of a 
pervasive authentication domain [(lines 1-4 of [0023]; lines 1-10 
and 19-21 of [0482]; Fig. 1B from Traversat et al.)]; and 
ascertaining if the at least one pervasive device is within a give 
distance of the gateway [(lines 1-7 of [0301] and lines 1-10 of 
[0323] from Traversat et al.)]. 
In addition, Bryson discloses the limitations: 
as measured by signal strength of wireless communication [(lines 
1-8 of [0016] and lines 1-9 of [0106] from Bryson)], wherein 
said gateway is integrated on a combined pervasive device [(Fig. 
3, 108 from Bryson)]. 

Engberg et al., Traversat et al., and Bryson are from similar 
technology relating to security for the digital content and token 
data. It would have been obvious to one of ordinary skill in the art 
at the time of invention was made to combine Engberg et al. with 
Traversat et al. and Bryson since one would be motivated to 
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establish a reliable connections between peers (lines 2-3 of 
[0007] from Traversat et al.) and to extend the range of the user 
devices by retransmitting data from the devices with an increased 
effective radiated power (lines 6-7 of [0009] from Bryson). 
Therefore, it would have been obvious to combine Engberg et al. 
with Traversat et al. and Bryson to obtain the invention as 
specified in claim 1 . 

As per Claim 25, it is a program storage device claim that 
corresponds to the method claim 1 . Therefore, it is rejected with 
the same rationale applied against Claim 1 above. 

As per Claim 27, it is a computer usable medium claim that 
corresponds to the method claim 1 . Therefore, it is rejected with 
the same rationale applied against Claim 1 above. 

b. Referring to Claim 3: 

As per Claim 3, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 1, wherein said 
ascertaining step comprises looking up a personal authentication 
gateway address in configuration settings [(lines 6-8 of [0163]; 
lines 5-6 of [0322]; lines 1-9 of [0343]; lines 9-10 of [0344] 
from Traversat et al.)]. 

c. Referring to Claim 5: 
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As per Claim 5, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 1 , wherein said receiving 
step comprises storing received credentials for use by other 
applications [(lines 17-25, Col. 4 and lines 38-43, Col. 7; Fig. 2 
from Engberg et al.)]. 
d. Referring to Claims 7. 26. and 28: 

As per Claim 7, Engberg et al. disclose a method of enabling at 
least one personal authentication gateway to distribute at least 
one authentication token to at least one authorized pervasive 
device, the at least one personal authentication gateway 
comprising at least one token server and the at least one 
pervasive device comprising at least one automatic token client, 
said method comprising the steps of: 

receiving at least one token request from at least one pervasive 
device on at least one personal authentication gateway [(lines 
22-25 and 58-60, Col. 5; Fig. 1)], 

determining whether the pervasive device is authorized to receive 
authentication tokens [(lines 36-42, Col. 6)]; 
sending at least one token response to the at least one pervasive 
device from at least one personal authentication gateway [(lines 
28-31 and 60-65, Col. 5; Fig. 1)]. 

Enberg et al. do not expressly disclose the remaining limitations 
of the claim. However, Traversat et al. disclose wherein said 
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sending step comprises the at least one personal authentication 
gateway responding to a pervasive authentication domain 
discovery message from the at lest one pervasive device [(lines 
1-10 of [0323]; lines 9-18 of [0331] from Traversat et al.)]; 
wherein the at least on pervasive device broadcasts a pervasive 
authentication domain discovery request message to the at least 
one personal authentication gateway [(lines 1-3 of [0277]; lines 
1-10 of [0323]; lines 9-18 of [0331] from Traversat et al.)]; 
wherein said determining step comprises: 
ascertaining if the at lest one pervasive device has been 
registered as a member of the pervasive authentication domain 
[(lines 1-4 of [0023]; lines 1-10 and 19-21 of [0482]; Fig. 1B 
from Traversat et al.)]; and 

ascertaining whether the at least one pervasive device is within a 
given distance of the gateway [(lines 1-7 of [0301] and lines 1- 
1 0 of [0323] from Traversat et al.)]. 

In addition, Bryson disclose as measured by signal strength of 
wireless communication [(lines 1-8 of [0016] and lines 1-9 of 
[0106] from Bryson)], wherein said gateway is integrated on a 
combined pervasive device [(Fig. 3, 108 from Bryson)]. 
Engberg et al., Traversat et al., and Bryson are from similar 
technology relating to security for the digital content and token 
data. It would have been obvious to one of ordinary skill in the art 
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at the time of invention was made to combine Engberg et al. with 
Traversat et al. and Bryson since one would be motivated to 
establish a reliable connections between peers (lines 2-3 of 
[0007] from Traversat et al.) and to extend the range of the user 
devices by retransmitting data from the devices with an increased 
effective radiated power (lines 6-7 of [0009] from Bryson). 
Therefore, it would have been obvious to combine Engberg et al. 
with Traversat et al. and Bryson to obtain the invention as 
specified in claim 7. 

As per Claim 26, it is a program storage device claim that 
corresponds to the method claim 7. Therefore, it is rejected with 
the same rationale applied against Claim 7 above. 

As per Claim 28, it is a computer usable medium claim that 
corresponds to the method claim 7. Therefore, it is rejected with 
the same rationale applied against Claim 7 above, 
e. Referring to Claim 10: 

As per Claim 10, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 7, wherein said receiving 
step comprises: 

determining the pervasive device identification of the at least one 
token request [(lines 36-42, Col. 6 from Engberg et al.)], 
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retrieving at least one authentication token for the pervasive 
device [(lines 28-31 and 60-65, Col. 5; Fig. 1 from Engberg et 
al.)]. In addition, Traversat et al. disclose deriving at least one 
pervasive authentication domain for the at least one pervasive 
device [(lines 1-4 of [0023]; lines 1-10 and 19-21 of [0482]; Fig. 
1B from Traversat et al.)]. 

f. Referring to Claim 17: 

As per Claim 17, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 10, wherein said 
determining step comprises ascertaining whether the at least one 
pervasive device has recently made a previous request [(lines 1- 
6 of [0303] and lines 4-6 of [0417] from Traversat et al.)]. 

g. Referring to Claim 18: 

As per Claim 18, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 10, wherein said 
determining step comprises ascertaining whether the at least one 
pervasive device has not sent a message indicating that the at 
least one pervasive device is no longer to be trusted [(lines 8-9 of 
[0112] and lines 1-11 of [0392] from Traversat et al.)] 

h. Referring to Claim 24: 

As per Claim 24, Engberg et al. disclose an apparatus comprising 
means for enabling at least one personal authentication gateway 
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to distribute authentication tokens to at least one authorized 

pervasive device, said apparatus comprising: 

means for receiving a token request from at least one pervasive 

device [(lines 22-25 and 58-60, Col. 5; Fig. 1)]; 

means for determining whether the at least one pervasive device 

is authorized to receive authentication tokens [(lines 36-42, Col. 

6)]; and 

means for sending at least one token response to said at least 
one pervasive device from at least one personal authentication 
gateway [(lines 28-31 and 60-65, Col. 5; Fig. 1)]. 
Engberg et al. do not expressly disclose means for registering at 
least one pervasive device for membership in a pervasive 
authentication domain and other limitations of the claim. 
However, Traversat et al. disclose wherein the at least one 
pervasive device broadcasts a pervasive authentication domain 
discovery request message to the at least one personal 
authentication gateway [(lines 1-3 of [0277]; lines 1-10 of 
[0323]; lines 9-18 of [0331] from Traversat et al.)]; 
wherein said determining step comprises: 

means for registering at least one pervasive device for 
membership in a pervasive authentication domain and 
ascertaining if the at least one pervasive device has been 
registered as a member member of the pervasive authentication 
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domain [(lines 1-4 of [0023]; lines 1-10 and 19-21 of [0482]; 
Fig. IB from Traversat et al.)]; and 

ascertaining whether the at least one pervasive device is within a 
given distance of the gateway [(lines 1-7 of [0301] and lines 1- 
10 of [0323] from Traversat et al.)]. In addition, Bryson 
discloses as measured by signal strength of wireless 
communication [(lines 1-8 of [0016] and lines 1-9 of [0106] 
from Bryson)], wherein said gateway is integrated on a 
combined pervasive device [(Fig. 3, 108 from Bryson)]. 
Engberg et al., Traversat et al., and Bryson are from similar 
technology relating to security for the digital content and token 
data. It would have been obvious to one of ordinary skill in the art 
at the time of invention was made to combine Engberg et al. with 
Traversat et al. and Bryson since one would be motivated to 
establish a reliable connections between peers (lines 2-3 of 
[0007] from Traversat et al.) and to extend the range of the user 
devices by retransmitting data from the devices with an increased 
effective radiated power (lines 6-7 of [0009] from Bryson). 
Therefore, it would have been obvious to combine Engberg et al. 
with Traversat et al. and Bryson to obtain the invention as 
specified in claim 24. 
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i. Referring to Claims 19 and 29: 

As per Claim 19, Engberg et al. disclose an apparatus for 
enabling at least one pervasive device to retrieve at least one 
authentication token from at least one personal authentication 
gateway, said apparatus comprising: 

a discoverer which finds at least one personal authentication 
gateway capable of responding to token requests [(lines 13-17, 
Col. 4 and lines 27-32, Col. 6)]; 

a token requestor which sends at least one request for at least 
one token required by the at least one pervasive device [(lines 
22-25 and 58-60, Col. 5; Fig. 1)]; and 

a token responder which accepts at least one token request and 
sends at least one token response with at least one authentication 
token to the at least one pervasive device [(lines 22-25, 28-31, 
and 60-65, Col. 5; Fig. 1)]. 

Enberg et al. do not expressly disclose the remaining limitations 
of the claim. However, Traversat et al. disclose only if the at least 
one pervasive device is authorized, the at least one pervasive 
device being authorized by the steps comprising: 
registering the at least one pervasive device as a member of a 
pervasive authentication domain [(lines 1-4 of [0023]; lines 1-10 
and 19-21 of [0482]; Fig. IBfrom Traversat etal.)]; and 
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ascertaining if the at least one pervasive device is within a given 
distance of the gateway [(lines 1-7 of [0301] and lines 1-10 of 
[0323] from Traversat et al.)]. 

In addition, Bryson discloses as measured by signal strength of 
wireless communication [(lines 1-8 of [0016] and lines 1-9 of 
[0106] from Bryson)], wherein said gateway is integrated on a 
combined pervasive device [(Fig. 3, 108 from Bryson)]. 
Engberg et al., Traversat et al., and Bryson are from similar 
technology relating to security for the digital content and token 
data. It would have been obvious to one of ordinary skill in the art 
at the time of invention was made to combine Engberg et al. with 
Traversat et al. and Bryson since one would be motivated to 
establish a reliable connections between peers (lines 2-3 of 
[0007] from Traversat et al.) and to extend the range of the user 
devices by retransmitting data from the devices with an increased 
effective radiated power (lines 6-7 of [0009] from Bryson). 
Therefore, it would have been obvious to combine Engberg et al. 
with. Traversat et al. and Bryson to obtain the invention as 
specified in claim 19. 

As per Claim 29, it is a computer usable medium claim that 
corresponds to the method claim 19. Therefore, it is rejected with 
the same rationale applied against Claim 19 above. 
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8. Claims 4, 11, and 20-23 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Engberg et al. (U.S. Patent 6,993,658), Traversat et al. 
(U. S. Pub. 2002/0152299), and Bryson (U.S. Pub. 2004/0185777), and 
further in view of Lincke et al. (U.S. Patent 6,253,326). 
a. Referring to Claim 4: 

As per Claim 4, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 1 , wherein the at least one 
token request comprises a pervasive device identification, a 
message type [(lines 32-50, Col. 5 from Engberg et al.)]. 
Engberg et al., Traversat et al., and Bryson do not expressly 
disclose the remaining limitation of the claim. However, Lincke et 
al. disclose a protection arrangement for fields of the at least one 
token request, the protection arrangement being adapted to 
ensure integrity and confidentiality as request message being 
encrypted for security [(lines 57-62, Col. 89 from Lincke et al.)]. 
Engberg et al., Traversat et al., Bryson, and Lincke et al. are from 
similar technology relating to security for the digital content and 
data. It would have been obvious to one of ordinary skill in the art 
at the time of invention was made to combine Engberg et al., 
Traversat et al., and Bryson with Lincke et al. to have encrypted 
request for protection since one would be motivated to securely 
transmitting a message from a wireless client (lines 38-39, Col. 3 
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from Lincke et al.). Therefore, it would have been obvious to 
combine Engberg et al., Traversat et al., and Bryson with Lincke 
et al. to obtain the invention as specified in claim 4. 
b. Referring to Claim 11: 

As per Claim 11, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 7, wherein the at least one 
token response sent comprises of a pervasive -device 
identification, the message type, authentication tokens [(lines 29- 
32 and 35-40, Col. 6 from Engberg et al.)]. Engberg et al., 
Traversat et al., and Bryson do not expressly disclose the 
remaining limitation of the claim- However, Lincke et al. disclose 
a protection arrangement for fields of the at least one token 
response, the protection arrangement being adapted to ensure 
integrity and confidentiality as response message being encrypted 
for security [(lines 44-50, Col. 89 from Lincke et al.)]. Engberg 
et al., Traversat et al., Bryson, and Lincke et al. are from similar 
technology relating to security for the digital content and data. It 
would have been obvious to one of ordinary skill in the art at the 
time of invention was made to combine Engberg et al., Traversat 
et al., and Bryson with Lincke et al. to have encrypted response 
for protection since one would be motivated to securely 
transmitting a message from a wireless client (lines 38-39, Col. 3 
from Lincke et al.). Therefore, it would have been obvious to 
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combine Engberg et al., Traversat et al,, and Bryson with Lincke 
et al. to obtain the invention as specified in claim 20. 
c. Referring to Claim 20: 

As per Claim 20, Engberg et al., Traversat et al., and Bryson 
disclose the apparatus according to claim 19, wherein the at least 
one token request comprises a pervasive device identification, the 
message type, at least one authentication token [(lines 29-32 
and 35-40, Col. 6 from Engberg et al.)]. Engberg et al., 
Traversat et al., and Bryson do not expressly disclose the 
remaining limitation of the claim. However, Lincke et al. disclose 
a protection arrangement for fields of the at least one token 
request, the protection arrangement being adapted to ensure 
integrity and confidentiality as request message being encrypted 
for security [(lines 57-62, Col. 89 from Lincke et al.)]. Engberg 
et al!, Traversat et al., Bryson, and Lincke et al. are from similar 
technology relating to security for the digital content and data. It 
would have been obvious to one of ordinary skill in the art at the 
time of invention was made to combine Engberg et al., Traversat 
et al., and Bryson with Lincke et al. to have encrypted request for 
protection since one would be motivated to securely transmitting a 
message from a wireless client (lines 38-39, Col. 3 from Lincke et 
al.). Therefore, it would have been obvious to combine Engberg 
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et al., Traversat et al., and Bryson with Lincke et al. to obtain the 
invention as specified in claim 20. 

d. Referring to Claim 21: 

As per Claim 21, Engberg et al., Traversat et al., Bryson and 
Lincke et al. disclose the apparatus according to claim 20, 
wherein said protection arrangement comprises Triple-DES 
encryption using a long key [(lines 65-67, Col. 3 and lines 45-50, 
Col. 91 from Lincke et al.)]. 

e. Referring to Claim 22: 

As per Claim 22, Engberg et al., Traversat et al., Bryson, and 
Lincke et al. disclose the apparatus according to claim 21, 
wherein said long key is a secure hash comprised of a master 
secret known only to the personal authentication gateway, a 
pervasive device identification, and a pervasive authentication 
domain identification [(lines 9-13, Col. 4; lines 17-22 and 35-38, 
Col. 6 from Engberg et al.) and (lines 19-21, Col. 85 from 
Lincke et al.)]. 

f. Referring to Claim 23: 

As per Claim 23, Engberg et al., Traversat et al., Bryson, and 
Lincke et al. disclose the apparatus according to claim 21, 
wherein said long key is distributed to the at least one pervasive 
device during registration [(lines 47-49, Col. 85 and lines 45-50, 
Col. 91 from Lincke etal.)]. 
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9. Claims 13-14 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Engberg et al. (U.S. Patent 6,993,658), Traversat et al. (U. S. Pub. 
2002/0152299), and Bryson (U.S. Pub. 2004/0185777), and further in view 
of Lewis et al. (U.S. Patent 6,233,565). 
a. Referring to Claim 13: 

As per Claim 13, Engberg et al., Traversat et al., and Bryson 
disclose the method according to claim 7, wherein said registering 
step comprises: entering the same random password on the 
pervasive device and the personal authentication gateway [(lines 
52-59, Col. 4; lines 15-19, Col. 5; lines 1-18, Col. 7 from 
Engberg et al.)]. 

Engberg et al., Traversat et al., and Bryson do not expressly 
disclose the remaining limitations of the claim. However, Lewis et 
al. disclose generating on the personal authentication gateway an 
encryption key, Slave_ID_Secret, which is encrypted by the 
random password [(lines 7-11, Col. 40 from Lewis et al.)]; 
transferring the protected key to the pervasive device and 
computing a fingerprint of the protected key on the personal 
authentication gateway [(lines 1-4, Col. 29 from Lewis et al.)]; 
and comparing the fingerprint of the received and decrypted 
protected key on the pervasive device [(lines 6-9, Col. 29 and 
lines 9-11, Col. 40 from Lewis)]. 
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Engberg et al., Traversat et al., Bryson, and Lewis et al. are from 
similar technology relating to security for the digital content and 
data. It would have been obvious to one of ordinary skill in the art 
at the time of invention was made to combine Engberg et al., 
Traversat et al., and Bryson with Lewis et al. to have hash of key 
for verification since one would be motivated to use said public 
and private keys of said client and server to perform the 
authentication (lines 15^16, Col. 6 from Lewis et al.). Therefore, it 
would have been obvious to combine Engberg et al., Traversat et 
al., and Bryson with Lewis et al. to obtain the invention as 
specified in claim 13. 
b. Referring to Claim 14: 

As per Claim 14, Engberg et al., Traversat et al., Bryson, and 
Lewis et al. disclose the method according to claim 13, wherein 
the encryption key, Slave_ID_Secret, is used as a protection 
arrangement for token requests and token responses [(lines 12- 
14, Col. 6 from Lewis et al.) and (lines 22-25 and 57-62, Col. 5 
and from Engberg et al.)]. 
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Response to Arguments 

10. Applicant's amendment, filed on Jul. 05, 2007, has Claims 1, 7, 13, 19, 
and 24-29 have been amended and Claims 2, 6, 8-9, 12, and 15-16 
canceled. 

11. Applicant's amendment, filed on Jul. 05, 2007, has added the new 
. limitation, "measured by signal strength" and "wherein said gateway is 

integrated on a combined pervasive device". This necessitates a new 
ground(s) of rejection. 

Conclusion 

12. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). 
Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire 
THREE MONTHS from the mailing date of this action. In the event a first 
reply is filed .within TWO MONTHS of the mailing date of this final action 
and the advisory action is not mailed until after the end of the THREE- 
MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee 
pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory period for reply 
expire later than SIX MONTHS from the date of this final action. 
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a. Fishman et al. (U.S. Patent 7,047,560) disclose methods, systems, 
and computer program products for authenticating a mobile client 
that may have an input system optimized for numeric input. A 
mobile gateway receives authentication credentials from a mobile 
client and uses an authentication filter to map the authentication 
credentials according to pre-established criteria. The 
authentication filter may change the domain name, the username, 
or both. Then, the mapped authentication credentials are sent to a 
network that includes the content server being accessed. Any 
access privileges granted to the mobile client are based on the 
mapped authentication credentials. The mobile gateway may be 
configured to accept connections only from known servers. Mobile 
authentication credentials may be maintained in one or more 
domains, possibly having a trust relationship, or may be stored in a 
separately administered credential database. 

13. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Yin-Chen Shaw whose telephone 
number is 571-272-8593. The examiner can normally be reached on 8:15 
to4:15M-F. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Yen Vu can be reached on 571-272-3859. 
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The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status 
information for published applications may be obtained from either Private 
PAIR or Public PAIR. Status information for unpublished applications is 
available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on 
access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 



YCS 



Sep. 17, 2007 
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